Privacy policy

1. Who is responsible for your data

The data controller is [Vicious Magazine legal name] (“Vicious Magazine”), tax ID [NIF/CIF], [Registered address]. For anything about your data, write to hello@viciousmagazine.com.

2. What data we collect

• Your email address, which you type to start voting.
• The verification code we send to that address, used only to confirm it is yours. It expires after a few minutes.
• Your votes: the categories and nominees you choose, and when you vote.
• Technical data needed to protect the vote, such as your IP address and the date and time of each request.

We don’t ask for your name, phone number or any other data to vote.

3. Why we use it, and on what legal basis

• To verify your email and register your votes, allowing one ballot per email and preventing fraud. Legal basis: your participation in the voting, which you request (Art. 6(1)(b) GDPR), and our legitimate interest in a fair vote (Art. 6(1)(f) GDPR).
• To send you emails from Vicious Magazine about the Vicious Music Awards: reminders while voting is open, the finalists, the winners, the gala and the next edition. Legal basis: your consent, given when you tick the box before voting (Art. 6(1)(a) GDPR and Art. 21 of Spain’s Law 34/2002, LSSI).
• To publish the results. Only totals per nominee and category are published; your individual votes and your email are never published.

We don’t sell your data, and we don’t use it for automated decisions or profiling.

4. Emails about the awards

Every email we send includes a link to unsubscribe in one click. You can also unsubscribe by writing to hello@viciousmagazine.com. Unsubscribing doesn’t affect the votes you have already cast.

You can’t vote without ticking the box, so the date you confirmed your email and the version of this policy in force that day are our record of your consent, which the law and our email provider ask us to keep.

5. Who processes your data on our behalf

• IPS Projects, S.L. (MavelPoint), Spain: runs the voting platform.
• Microsoft Ireland Operations Ltd. (Microsoft Azure): hosting and email sending infrastructure, in the European Union.
• Sendinblue SAS (Brevo), France: sending emails.
• Microsoft (Clarity): anonymous statistics about how the website is used. It may involve transfers to the United States, covered by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

These providers process your data only on our instructions and under a data processing agreement:

6. How long we keep it

• Your email and your votes: until the results of the edition are final and for 12 months after the gala, to handle claims and verify the result. After that, we delete them or keep only anonymous totals.
• Your consent to receive emails: until you unsubscribe. We then keep the record of your consent and of your unsubscribing only as long as we may need it to prove them.
• Verification codes: a few minutes, until they expire.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time, without affecting what was done before. Write to hello@viciousmagazine.com from the email address you voted with; we answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Minimum age

You must be at least 14 years old to vote. If we learn that someone younger has voted, we will delete their data.

9. Changes to this policy

If we change this policy, we will publish the new version on this page with its date. If the change affects what you agreed to, we will ask you again.